data-center-bullying-security[.]pages[.]dev

The domain data-center-bullying-security.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is served by the authoritative nameservers zariyah.ns.cloudflare.com and rohin.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents a Cloudflare‑issued SSL certificate signed by Google Trust Services (WE1) and enforces HSTS while supporting HTTP/3. An HTTP request returns a 403 status code, indicating that the page is currently inaccessible; the service is listed as taken offline.

The page title returned by the server is "Suspected phishing site | Cloudflare," and the scam is classified as Banking Phishing. Security telemetry shows the domain is listed on one blocklist and has been blocked by PhishDestroy. VirusTotal analysis records 15 of 93 scanning engines flagging the domain as malicious, reinforcing the suspicion. Independent trust assessments are extremely low, with Gridinsoft scoring 0 out of 100 and Scamadviser assigning a 1 out of 100 rating.

These metrics collectively indicate a high confidence that the domain is being used for credential‑ harvesting targeting financial institutions. While the exact content of the phishing page cannot be verified due to the 403 response, the convergence of registrar, hosting, SSL, detection and trust‑score data provides sufficient evidence for defensive action. Organizations should add the domain and its resolved IP address to network‑level deny lists, monitor for any future re‑registration, and consider sinkholing the associated Cloudflare namespace if operationally feasible. Continuous observation of related threat‑intel feeds is advised to capture any resurgence or copycat campaigns that may adopt the same naming pattern.